Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Q8oHjRq_W0dOylQvfLreqRYP9fM.roa
File: Q8oHjRq_W0dOylQvfLreqRYP9fM.roa (raw, json)
Hash identifier: xCc3KqyUM24jJC5D8pN+jIaACd6Ug1LsolQiQEgsBXU=
Subject key identifier: 43:CA:07:8D:1A:BF:5B:47:4E:CA:54:2F:7C:BA:DE:A9:16:0F:F5:F3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188FD0EAB7B981B8C6FBD208CA7AC6C5F86
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Q8oHjRq_W0dOylQvfLreqRYP9fM.roa
Signing time: Tue 27 Jun 2023 13:32:57 +0000
ROA not before: Tue 27 Jun 2023 13:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.128.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:0e:ab:7b:98:1b:8c:6f:bd:20:8c:a7:ac:6c:5f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 27 13:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43ca078d1abf5b474eca542f7cbadea9160ff5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:85:88:f4:90:14:5c:31:d6:2d:0c:72:85:
60:04:93:e8:6f:d6:c5:66:d4:9e:1c:d3:65:9f:54:
7f:5d:a6:3a:f9:13:da:42:bd:0a:b7:0a:e0:c7:53:
22:99:21:ee:de:80:13:bf:8e:af:88:0a:d0:ce:d0:
ed:40:61:a8:67:17:df:8d:1e:af:04:ac:4e:dd:4a:
e3:1a:74:a3:bc:cf:03:11:ca:b8:81:7b:ae:8a:8e:
46:85:35:30:49:76:a6:95:8b:13:5b:7b:8b:00:df:
ee:4e:c8:69:df:9d:b3:29:5f:69:a7:77:85:b4:31:
dd:01:b7:f7:23:d5:14:c0:4b:03:c3:97:7d:42:fa:
ce:93:27:72:cc:cd:aa:3b:dd:df:6d:10:03:46:65:
c3:b3:89:2f:44:e6:87:06:e7:b1:cf:27:88:ff:ef:
93:a9:a2:11:53:62:b7:ed:37:ac:e0:1d:31:38:b9:
44:63:c5:9a:cc:37:4c:e6:b5:fb:65:7e:57:fe:89:
03:31:7c:a7:0b:7b:e9:ce:be:80:b7:e4:a0:fc:10:
4b:e2:10:a9:ab:8d:e0:dd:b5:41:fd:12:2f:c9:44:
08:28:99:2d:a9:a2:71:4c:12:d2:9b:e4:d8:e6:7a:
34:95:c9:e7:ec:2f:d3:57:cd:89:db:54:63:37:53:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:07:8D:1A:BF:5B:47:4E:CA:54:2F:7C:BA:DE:A9:16:0F:F5:F3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Q8oHjRq_W0dOylQvfLreqRYP9fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0/24
5.105.36.0/24
5.105.63.0/24
5.105.75.0/24
5.105.94.0/24
5.105.102.0/24
5.105.107.0/24
5.105.110.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.128.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a3:87:9f:61:39:c1:cc:cd:d2:4d:ba:95:07:0d:de:bf:df:
fb:79:04:e5:3c:d3:de:9c:73:d4:42:a0:a7:12:d2:d7:6a:cd:
93:16:a2:fc:45:14:0f:8b:b4:da:d3:de:68:ae:b4:f1:17:a8:
ac:15:66:e7:4e:f9:c0:75:f2:5a:9e:1b:1b:3b:b5:17:48:af:
83:03:bf:39:04:d5:41:c6:f7:60:3f:0d:88:d5:41:a5:10:3b:
6f:ac:dc:eb:be:01:d6:80:2c:01:6f:4f:02:7e:da:93:62:e7:
ae:66:a5:28:0a:58:fa:3c:65:26:b6:54:71:f3:cb:07:76:58:
f6:78:14:2c:76:95:9b:9b:d0:f5:a4:84:c0:cf:d4:8c:e6:2c:
d9:60:a8:d7:f0:6d:17:da:70:fe:e7:4e:3a:79:30:88:ad:4c:
77:0d:df:e6:d5:51:c3:b8:14:01:7f:b4:94:a2:6d:d7:c0:1b:
0d:40:78:d1:ab:64:6d:a7:eb:85:9c:1c:50:b2:0a:8b:7a:62:
0e:21:e5:71:f7:9e:2d:10:93:1f:11:c6:d2:cf:b4:0e:f9:eb:
2b:16:be:41:7e:47:bf:18:13:00:94:0c:a1:83:45:e4:25:c2:
70:1d:70:18:db:b7:3f:c6:7f:33:8a:eb:99:fe:f2:1d:4f:be:
53:15:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org